T1 – A Comprehensive Tutorial on Open RAN Security and Privacy in the Post-Quantum Era

Co-presenter: Abdullah Aydeger, Florida Institute of Technology, USA
Co-presenter: Engin Zeydan, Centre Tecnologic de Telecomm de Catalunya (CTTC), Spain
Co-presenter: Madhusanka Liyanage, University College Dublin, Ireland

Abstract: Open RAN (O-RAN) is a transformative framework for Radio Access Networks that introduces open, standardized interfaces to enable multi-vendor interoperability, greater flexibility, and reduced costs. It leverages network softwarization and Artificial Intelligence to optimize RAN performance and management. However, this openness also introduces significant new security and privacy risks that differ substantially from traditional closed RAN deployments.

This tutorial provides a comprehensive examination of O-RAN security and privacy challenges, covering the full threat landscape from open interface vulnerabilities to AI-driven attack surfaces, followed by practical mitigation strategies and ongoing standardization efforts. A dedicated segment addresses O-RAN security in the post-quantum era, covering NIST-standardized post quantum cryptography (PQC) algorithms (ML-KEM, ML-DSA, SLH-DSA) and their integration into O-RAN interface protection and 3GPP security procedures. Two live demonstrations ground the content in practice: a PQC-enabled UE registration flow and a QKD-based secure key exchange, both running in a portable virtualized environment.

The tutorial is self-contained and requires no prior setup from attendees. It targets graduate students, researchers, and engineers working on 6G, wireless security, and next-generation network design, and is directly relevant to the VTC community working on security and reliability in next generation wireless systems.

Co-presenter Bios:

Abdullah Aydeger:

Dr. Abdullah Aydeger is an Assistant Professor in the Department of Electrical Engineering and Computer Science at the Florida Institute of Technology (Florida Tech), Melbourne, Florida. He joined Florida Tech in August 2022, having previously served as an Assistant Professor at Southern Illinois University Carbondale (2020-2022). He received his Ph.D. in Computer and Electrical Engineering from Florida International University in 2020. His research focuses on post-quantum cryptography, 6G and O-RAN security, and cryptographic agility. He currently holds NSF funding for research on post-quantum security foundations for adaptive 6G infrastructure and teaches graduate courses in secure data communications and computer networks. Contact: aaydeger@fit.edu

Engin Zeydan:

Dr. Engin Zeydan is a Senior Researcher at the Centre Tecnologic de Telecomunicacions de Catalunya (CTTC), Barcelona, Spain, where he has been a member of the Services as Networks Research Unit since November 2018. He received his Ph.D. in Electrical and Computer Engineering from Stevens Institute of Technology, Hoboken, NJ, in February 2011. His research spans machine learning for network management, quantum-secured communications, and network security. He has co-authored publications with Dr. Aydeger on PQC and QKD integration in 6G at IEEE MeditCom 2024, IEEE LCN 2024, and IEEE Network of Future 2024. Contact: ezeydan@cttc.es

Madhusanka Liyanage:

Dr. Madhusanka Liyanage is an Associate Professor/Ad Astra Fellow and Director of the Network Softwarization and Security Labs (NetsLab) at the School of Computer Science, University College Dublin, Ireland. He is also a Docent/Adjunct Professor at the University of Oulu, University of Ruhuna, and University of Sri Jayewardenepura. He earned his Doctor of Technology in Communication Engineering from the University of Oulu in 2016 and received both the Marie Skłodowska-Curie Individual Fellowship and the Government of Ireland Postdoctoral Fellowship (2018–2020). He has held visiting positions at leading institutions in Australia, the U.K., and France, and is a Senior Member of IEEE. In 2020, he received the IEEE ComSoc Outstanding Young Researcher Award (EMEA). From 2020 to 2023, he was ranked among the world’s top 2% of scientists by Stanford University and Elsevier. He also received the Irish Research Council Research Ally Prize (2021, 2023) and the 2022 Tom Brazil Excellence in Research Award from the SFI CONNECT Centre. Dr. Liyanage has co-authored over 250 publications, including seven books and two patents (19,000+ citations; index 60+), and received multiple Best Paper Awards. He has secured over C10 million in research funding and serves as PI for three major EU Horizon projects. He has contributed to more than fifteen EU and international ICT projects, coordinated EU COST initiatives, and acts as an expert consultant for European Union Agency for Cybersecurity (ENISA).